---
typeId: req
recordId: benac-stor-007
fields:
  title: CID verification on retrieval
  statement: Benac shall verify retrieved blob bytes against the expected DASL CID
    before accepting them as the requested blob, using them for execution,
    decrypting them, or forwarding them to compute.
  rationale: A provider can return wrong or malicious bytes.
  verification: Wrong bytes trigger integrity failure and are not used.
  testable: true
  status: draft
  area: BENAC-STOR
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.11 Storage discovery, remote storage, and content availability
  order: 124
---
